Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: bLq77uqI5KnfQLnK5kB/DIRNW6WqKry8T9tirK+yTEU=
Subject key identifier: 6B:2C:80:CF:C2:EC:E0:EC:E0:5A:9F:17:7E:E0:75:17:62:7B:B1:FA
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01A06F4C301A8EFC21BDE64970B41AA71DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 1040
Signing time: Sat 05 Sep 2026 02:00:58 +0000
Manifest this update: Sat 05 Sep 2026 02:00:58 +0000
Manifest next update: Sun 06 Sep 2026 02:00:58 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: Vx6H4jpuXV211YJMhrDIYIJxklhY9V5ttP//OSAcJJQ=)
2: jjz54tPWsuXjHrsRR3lGh9uQu6o.roa (hash: 02vfAYgOdeQNaFi8ZY69MJehPQkiX3iDuuBOrYgPuMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:30:1a:8e:fc:21:bd:e6:49:70:b4:1a:a7:1d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Sep 5 02:00:58 2026 GMT
Not After : Sep 6 02:00:58 2026 GMT
Subject: CN=6b2c80cfc2ece0ece05a9f177ee07517627bb1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:bd:6b:d0:59:7d:a4:f7:a2:80:fc:f0:d8:
5d:81:92:36:af:d1:6d:33:9b:b1:8f:10:c3:ea:a3:
f5:82:90:2d:2d:75:54:57:c8:9a:16:d8:3d:94:7c:
35:82:a1:5b:5a:7c:bc:e5:0e:17:30:30:10:21:f3:
57:ee:8c:fd:f6:da:e1:0a:16:f7:9d:d8:02:48:98:
a7:af:5b:f6:40:bb:57:d9:69:d9:eb:29:41:63:43:
7c:6f:a6:6e:45:f6:28:38:c9:b5:88:dc:91:2e:c6:
01:bd:f7:80:5a:28:3d:0b:ef:12:ac:07:69:e5:b0:
a1:7c:75:9d:52:43:62:78:40:52:69:ee:9d:d9:34:
f1:6c:c3:32:15:fe:9a:37:90:84:24:d3:fe:f5:38:
97:e7:37:0d:bc:43:00:e3:8e:90:3e:7d:c7:60:5c:
b3:c6:8e:8a:2f:67:03:15:76:db:fe:de:5c:8b:76:
c1:4e:71:c1:69:12:f8:5f:a0:88:4f:7a:52:68:69:
90:1f:eb:de:c2:21:de:3a:56:f3:a8:93:36:a6:8a:
26:6a:70:30:7b:8e:31:f7:48:f0:8a:37:29:21:fd:
36:f1:17:60:84:46:b9:93:92:cc:15:64:fd:b6:f7:
13:75:b3:cc:f0:f0:c5:ce:3a:9b:c1:9b:05:73:16:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:80:CF:C2:EC:E0:EC:E0:5A:9F:17:7E:E0:75:17:62:7B:B1:FA
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:91:95:5d:e4:e0:2d:17:17:2c:d4:1e:11:7a:71:6c:f3:ff:
3d:02:a0:8d:d4:a0:e9:37:cb:ce:1f:5f:21:02:b6:7f:17:d9:
f5:d2:04:45:04:98:0d:f5:e4:e2:f0:24:8a:fb:b3:5c:b2:c9:
9a:3d:4d:cf:41:e8:c7:e6:4d:55:76:90:5e:ae:71:23:f2:b3:
db:72:f0:fa:e5:3f:81:29:cf:ab:c8:ce:8c:a3:c4:dc:71:30:
f3:63:aa:d2:b4:34:71:20:9e:66:19:2d:37:26:be:7c:48:3a:
f2:f3:df:e4:ed:45:e1:2a:35:f3:47:ec:28:26:34:ba:7f:66:
04:a4:2e:04:16:08:63:a6:a7:49:00:e4:73:6e:48:e9:78:a5:
92:58:5f:4b:d7:80:0c:07:40:fc:b1:0a:d7:7a:90:0d:16:6b:
53:7a:fb:ef:c4:eb:ee:d6:23:1e:ee:4e:23:70:cf:45:5c:8f:
2f:59:f9:67:c5:92:1f:38:75:38:eb:d3:06:02:29:58:b1:0f:
c5:9f:ee:f7:5f:4b:39:6a:61:f5:b7:5e:6f:bb:dc:24:a6:aa:
2d:e6:1d:9a:21:37:ac:f2:3f:17:25:57:ea:81:d9:5a:56:a1:
e0:1d:e7:54:1a:5e:d0:84:fb:13:65:d2:a8:18:45:b6:32:19:
44:ac:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:15 2026 by rpki-client